Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
posthog/duckdb/.github/actions/trim-ccache
DuckDB is an analytical in-process SQL database management system
greut/eclint-action
GitHub Action running the EditorConfig linter
nx1x/cloudflare-warp-action/fill
Headless Cloudflare WARP enrollment for GitHub Actions runners. Full network access via your Zero Trust org.
davidb/rust-cargo-make
๐ ๏ธ GitHub Action to install `cargo-make` command
step-integration-tests/auto-pdpr-test-38233-3/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
elastic/apm-aws-lambda/.github/actions/bootstrap
A repository for the AWS Lambda extension and other lambda related tools and build scripts.
contrast-security-oss/contrast-sca-action
Contrast SCA GitHub Action
step-integration-tests/auto-pdpr-test-71008-1/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
fish-shop/indent-check
A GitHub action for checking indentation in fish shell files.
sonarsource/sonar-java-symbolic-execution/.actions/image
Sonar Java symbolic execution plugin
step-security/workflow-conclusion-action/__builder_checkout_dir__/.github/actions/compute-sha256
GitHub action to get workflow conclusion. Secure drop-in replacement for technote-space/workflow-conclusion-action.
nvidia/nemoclaw/.github/actions/setup-native-podman-e2e
Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference
esmf-org/install-esmf-action
Install ESMF libraries, modules, and binaries on GitHub Runner
imaralabs-ai/coder/.github/actions/setup-embedded-pg-cache-paths
Secure environments for developers and their agents
rafidhaque/fake-mali-action
step-security/super-linter/image
Combination of multiple linters to run as a GitHub Action or standalone. Secure drop-in replacement for super-linter/super-linter.
devantler-tech/ksail/.github/actions/cleanup-hetzner
All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.
sonarsource/gh-action_release/maven-central-sync
caffeelake/airbyte/.github/actions/public-layout.tsx
The leading data integration platform for ETL / ELT data pipelines from APIs, databases & files to data warehouses, data lakes & data lakehouses. Both self-hosted and Cloud-hosted.
immich-app/devtools/actions/create-workflow-token
Various tooling used by the Immich maintainer team